Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
8-18
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 8 Anti-Virus
Figure 8-5
Flow Diagram for Anti-Virus Actions
Note
If you configure multi-layer anti-virus scanning, the Cisco IronPort appliance performs virus scanning
with the McAfee engine first and the Sophos engine second. It scans messages using both engines, unless
the McAfee engine detects a virus. If the McAfee engine detects a virus, the Cisco IronPort appliance
performs the anti-virus actions (repairing, quarantining, etc.) defined for the mail policy.
with the McAfee engine first and the Sophos engine second. It scans messages using both engines, unless
the McAfee engine detects a virus. If the McAfee engine detects a virus, the Cisco IronPort appliance
performs the anti-virus actions (repairing, quarantining, etc.) defined for the mail policy.
Testing Virus Scanning
Step 1
Enable virus scanning for a mail policy.
Use the Security Services > Sophos/McAfee Anti-virus page or the
antivirusconfig
command to set
global settings, and then use the Email Security Manager pages (GUI) or the
antivirus
subcommand of
policyconfig
to configure the settings for a specific mail policy.
Step 2
Open a standard text editor, then type the following character string as one line, with no spaces or line
breaks:
breaks:
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*